EUCORA

End-User Computing Orchestration & Reliability Architecture

Enterprise-Grade Endpoint Application Packaging & Deployment Factory

Built by BuildWorks.AI

Overview • Capabilities • Architecture • Getting Started • Documentation

--- ## Overview **EUCORA** is a platform engineering solution that brings strict control plane discipline to enterprise endpoint management. It serves as a unified orchestration layer for policy, evidence, and reliability across heterogeneous execution planes including **Intune**, **Jamf**, **SCCM**, **Landscape**, and **Ansible**. ### The Problem We Solve Managing 50,000+ endpoints across acquisitions with 5,000+ applications creates unacceptable risk in: - **Security**: Privilege sprawl, unverified software, weak auditability - **Operations**: Configuration drift, inconsistent deployment outcomes - **Governance**: CAB evidence gaps, non-deterministic approvals ### Our Approach EUCORA implements a **thin Control Plane** that standardizes the enterprise application lifecycle without replacing existing MDM infrastructure. The platform decides **what** should happen; existing tools execute **how** it happens. --- ## Key Capabilities | Capability | Description | |------------|-------------| | **🎯 Thin Control Plane** | Separates policy intents from execution details across all platforms | | **📋 Evidence-First Governance** | CAB-ready evidence packs with hashes, signatures, SBOMs for every change | | **🔄 Ring-Based Rollouts** | Deterministic promotion gates (Lab → Canary → Pilot → Department → Global) | | **🌐 Hybrid Distribution** | Intelligent content handling for Online, Intermittent, and Air-gapped sites | | **🔍 Drift Detection** | Continuous reconciliation loops enforcing desired state | | **⚖️ Risk Scoring** | Deterministic risk assessment with versioned scoring rubrics | | **🤖 AI Agent Hub** | 12 specialized AI agents (E10-E21) for application lifecycle management automation | | **🧠 RAG Pipeline** | Document management, vector storage (pgvector), and semantic search | | **📊 Multi-Cloud Storage** | Storage abstraction supporting MinIO, AWS S3, and Azure Blob | | **🔐 Comprehensive RBAC** | 9 roles with 197 permissions and scope-based access control | | **📱 1E DEX Integration** | Digital employee experience metrics and telemetry | --- ## Architecture ``` ┌──────────────────────────────────────────────┐ │ Control Plane │ │ Policy + Orchestration + Evidence (Thin) │ │ │ │ ┌─────────────────────────────────────┐ │ │ │ AI Workflow Engine + ALM Agents │ │ │ │ (E10-E21: Planning, SecOps, SRE, │ │ │ │ KB Triage, SLA, Discovery, etc.) │ │ │ └─────────────────────────────────────┘ │ │ │ │ ┌─────────────────────────────────────┐ │ │ │ RAG Pipeline (Document Management │ │ │ │ + Vector Storage + Semantic Search)│ │ │ └─────────────────────────────────────┘ │ └───────────────┬──────────────────────────────┘ │ ┌───────────────▼──────────────────────────────┐ │ Packaging & Publishing Factory │ │ Build → Sign/Notarize → SBOM/Vuln → Test │ └───────────────┬──────────────────────────────┘ │ ┌────────────────────────▼────────────────────────┐ │ Execution Planes │ │ Intune | Jamf | SCCM | Landscape | Ansible │ └───────────────┬──────────────────────────────────┘ │ ┌───────────────▼──────────────────────────────────┐ │ Endpoint Devices │ │ Windows | macOS | Ubuntu | iOS/iPadOS | Android │ └──────────────────────────────────────────────────┘ ``` ### Core Principles 1. **Determinism** — No "AI-driven deployments"; all approvals and gates are explainable 2. **Separation of Duties** — Packaging ≠ Publishing ≠ Approval 3. **Idempotency** — Every deployment action can be retried safely 4. **Reconciliation over Hope** — Continuous desired-vs-actual drift detection 5. **Evidence-First Governance** — CAB decisions include standardized evidence packs 6. **Offline is First-Class** — Explicit distribution strategy per site class --- ## Platform Support | Platform | Primary | Secondary | Notes | |----------|---------|-----------|-------| | Windows | Intune | SCCM | Legacy OS / constrained sites | | macOS | Intune | Jamf | Jamf where deeper controls required | | Ubuntu/Linux | Landscape / Ansible | Agent fallback | Signed APT repo as standard | | iOS/iPadOS | Intune | — | ABM + ADE | | Android | Intune | — | Android Enterprise | --- ## Technology Stack ### Backend - **Django 5.x** with Django REST Framework - **PostgreSQL** with **pgvector** extension for vector storage - **Redis** for caching and task queues - **Celery** for async task processing - **AI Integration**: OpenAI, Azure OpenAI, local models ### Frontend - **React 18** with TypeScript - **Vite** for build tooling - **Tailwind CSS** with shadcn/ui components - **TanStack Query** for server state management ### Infrastructure - **Docker** for containerization - **Pre-commit hooks** for quality gates - **Multi-cloud storage**: MinIO, AWS S3, Azure Blob Storage --- ## Getting Started ### Prerequisites - Docker & Docker Compose - Python 3.10+ (for backend development) - Node.js 18+ (for frontend development) - PowerShell 7+ (for CLI tooling) ### Quick Start ```bash # Clone the repository git clone https://github.com/buildworksai/EUCORA.git cd EUCORA # Start development environment docker compose -f docker-compose.dev.yml up -d # Install pre-commit hooks (required for development) pip install pre-commit && pre-commit install ``` ### Development Setup See [docs/DEVELOPMENT_SETUP.md](docs/DEVELOPMENT_SETUP.md) for complete development environment configuration including: - Pre-commit hooks and quality gates - SPDX compliance checks - Backend and frontend development workflows - CI/CD integration details --- ## Documentation ### Architecture | Document | Description | |----------|-------------| | [Architecture Overview](docs/architecture/architecture-overview.md) | System-of-record for architectural decisions | | [Control Plane Design](docs/architecture/control-plane-design.md) | Control Plane component specifications | | [AI Agents Architecture](docs/architecture/ai-agents-architecture.md) | AI agent orchestration and coordination | | [ALM Agents Architecture](docs/architecture/alm-agents-architecture.md) | Application lifecycle management agents (E10-E21) | | [RAG Pipeline Architecture](docs/architecture/rag-pipeline-architecture.md) | Document management and semantic search | | [Risk Model](docs/architecture/risk-model.md) | Risk scoring formula, factors, and rubrics | | [Ring Model](docs/architecture/ring-model.md) | Ring-based rollout and promotion gates | | [CAB Workflow](docs/architecture/cab-workflow.md) | Change Advisory Board approval process | ### User Guides **Phase 2 Agent User Guides**: - [Planning Agent](docs/user-guides/plan

react-best-practices

Installation

SKILL.md